Lucene search

PRIOn knowledge basePRION:CVE-2023-40691

HistoryDec 18, 2023 - 9:15 p.m.

Design/Logic Flaw

2023-12-1821:15:00

PRIOn knowledge base

www.prio-n.com

ibm cloud pak

business automation

security flaw

sensitive information

application configuration

ibm x-force

nvd

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:M/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.1%

JSON

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive information contained in application configuration to developer and administrator users. IBM X-Force ID: 264805.

CPENameOperatorVersion
cloud_pak_for_business_automationeq21.0.1 interimfix7
cloud_pak_for_business_automationeq21.0.1 interimfix4
cloud_pak_for_business_automationeq21.0.1
cloud_pak_for_business_automationeq21.0.1 interimfix2
cloud_pak_for_business_automationeq21.0.1 interimfix3
cloud_pak_for_business_automationeq21.0.1 interimfix6
cloud_pak_for_business_automationeq21.0.1 interimfix5
cloud_pak_for_business_automationeq21.0.1 interimfix1
cloud_pak_for_business_automationeq21.0.3 interimfix3
cloud_pak_for_business_automationeq21.0.3 interimfix6

Name	Operator	Version
cloud_pak_for_business_automation	eq	21.0.1 interimfix7
cloud_pak_for_business_automation	eq	21.0.1 interimfix4
cloud_pak_for_business_automation	eq	21.0.1
cloud_pak_for_business_automation	eq	21.0.1 interimfix2
cloud_pak_for_business_automation	eq	21.0.1 interimfix3
cloud_pak_for_business_automation	eq	21.0.1 interimfix6
cloud_pak_for_business_automation	eq	21.0.1 interimfix5
cloud_pak_for_business_automation	eq	21.0.1 interimfix1
cloud_pak_for_business_automation	eq	21.0.3 interimfix3
cloud_pak_for_business_automation	eq	21.0.3 interimfix6

Rows per page:

1-10 of 541

References

exchange.xforce.ibmcloud.com/vulnerabilities/264805

www.ibm.com/support/pages/node/7096365

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:M/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.1%

JSON

Related for PRION:CVE-2023-40691